Malware Removal: Analyzing an Infected System

Overview/Description
Expected Duration
Lesson Objectives
Course Number
Expertise Level

---

Overview/Description

Familiarization with the different types of malware analysis and the tools used to analyze malware is a critical skill for IT security professionals. In this course, you'll explore the characteristics of malware and the impact the malware has on the infected system. You'll learn how to identify different malware analysis techniques, such as static and dynamic malware analysis, to discover activities performed by malware. You'll also examine some of the tools used to perform both static and dynamic malware analysis and how to use a disassembler to view malware code.

Expected Duration (hours)
1.8

Lesson Objectives

Malware Removal: Analyzing an Infected System

discover the key concepts covered in this course

recognize why malware analysis is important

describe the purpose of static malware analysis

identify the purpose of dynamic malware analysis

recognize common malware characteristics at the Windows API level (registry manipulation, keylogging, HTTP communications, droppers)

inspect the static properties of malware

perform dynamic malware analysis

recognize the impacts of the malware you discover

locate open ports and running processes used by malware and terminate the malware process

use tools to monitor malware processes

use Wireshark to monitor malware network activity

inspect malicious code and follow program control flow to recognize decision points during execution

summarize the key concepts covered in this course

Course Number:
it_cymlcudj_02_enus

Expertise Level
Beginner